maui-notifications-deep-links
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- Implementation of Secure Payload Practices: The skill correctly identifies the risks associated with push notification payloads and explicitly instructs developers to exclude PII, access tokens, and confidential content. It recommends using stable identifiers to fetch sensitive data securely after the application is opened.
- Authentication-Linked Token Management: The guidance includes proper lifecycle management for device push tokens, ensuring that tokens are associated with a user only after successful authentication and are disassociated upon logout, preventing unauthorized notification delivery.
- Modern API Adoption: The skill mandates the use of the Firebase Cloud Messaging (FCM) HTTP v1 API with OAuth 2.0 service-account credentials, adhering to current security standards and avoiding deprecated, less secure authentication methods such as legacy server keys.
- Standardized Deep Link Handling: The provided code snippets demonstrate how to intercept platform-specific lifecycle events and route them through a centralized navigation service, which is a recommended pattern for maintaining consistent control over external URI triggers.
Audit Metadata